Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/GIq5byWy8zTeRMahw4U0dOu4xv8.roa
File: GIq5byWy8zTeRMahw4U0dOu4xv8.roa (raw, json)
Hash identifier: Q+lNmjd27ckqlgZLv+v0f+PoLop9O4mtsURV0qmsQ9s=
Subject key identifier: 18:8A:B9:6F:25:B2:F3:34:DE:44:C6:A1:C3:85:34:74:EB:B8:C6:FF
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF340E23B3E72FC5DECB954DA6C6A34E
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/GIq5byWy8zTeRMahw4U0dOu4xv8.roa
Signing time: Tue 30 Aug 2022 14:42:22 +0000
ROA not before: Tue 30 Aug 2022 14:42:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42945
IP address blocks: 185.192.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:0e:23:b3:e7:2f:c5:de:cb:95:4d:a6:c6:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=188ab96f25b2f334de44c6a1c3853474ebb8c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:55:16:7e:75:3e:0f:ba:12:68:f4:5e:84:
4b:52:30:1c:f8:18:b2:05:03:db:fc:3b:2f:f2:33:
db:32:b2:03:e0:31:22:bf:3a:24:20:81:e8:92:d7:
b9:86:36:db:a7:37:ff:e9:c2:5a:2c:c5:e4:1c:6e:
d8:46:a8:17:93:60:f4:dc:d0:ce:3b:13:e5:b9:2d:
03:23:76:b4:17:2a:d7:3f:bc:3a:11:f2:47:85:5c:
d9:9e:07:92:85:93:05:6e:be:5d:de:07:ff:d6:ef:
04:d1:aa:ca:83:2d:41:d6:9b:db:b9:f7:29:e2:f2:
c4:3b:6d:95:d0:bc:74:31:45:e2:b7:59:75:34:06:
50:9a:b6:89:12:4f:21:fd:b4:8c:f5:23:77:97:34:
f6:8e:fc:72:fe:41:ae:26:15:c4:23:05:2c:b3:51:
e8:0f:db:dc:3a:88:2d:7c:9a:8f:e4:3f:16:6f:7d:
fb:59:45:d2:35:17:67:98:20:d2:01:3f:76:3f:31:
97:30:34:83:08:bc:6b:00:82:ab:a8:2c:a8:e2:b3:
af:e8:0a:d4:fe:ba:3e:e5:45:84:3b:c3:83:cb:ca:
68:d5:e5:df:76:c6:97:d0:80:6f:1c:89:1a:cb:03:
e3:17:30:81:f9:a4:6d:dc:ba:39:14:26:82:cd:84:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:B9:6F:25:B2:F3:34:DE:44:C6:A1:C3:85:34:74:EB:B8:C6:FF
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/GIq5byWy8zTeRMahw4U0dOu4xv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
41:27:cd:67:a2:c7:be:9a:79:6e:f4:52:e0:18:3c:5d:33:7d:
b7:c3:70:3c:fa:9c:15:1c:8c:52:09:08:87:e2:30:26:8d:6d:
1f:50:f8:5f:35:39:42:b6:f0:cc:63:f9:82:e7:c8:91:cf:64:
79:ed:cd:e0:ba:b4:d0:51:6d:0f:39:02:6b:a5:50:9a:77:d2:
0c:3b:41:b0:5d:60:38:bf:0a:f6:ca:c1:5c:ac:02:46:d1:2d:
5a:88:58:e4:55:f6:53:a8:ba:a5:45:08:f2:06:cd:a6:1a:3f:
9b:ee:6f:8e:32:9e:ae:4f:ba:88:96:cd:37:f6:a5:49:36:7d:
44:d9:bf:f8:23:d4:4d:fe:28:7f:e1:cd:9b:75:33:ae:4b:90:
9e:d6:10:07:b5:b0:fd:80:a1:5c:d0:61:8d:5f:04:eb:30:f4:
d5:90:5a:29:8d:e5:72:39:7b:55:0f:ca:6f:25:09:80:9d:90:
cf:47:3e:b3:d1:04:9c:61:c3:f7:d8:bd:24:bd:8a:9a:19:b4:
cc:8a:90:9f:67:f6:1b:93:a8:ec:c1:5e:b5:4f:00:b5:9b:1f:
58:36:df:fd:29:e3:a3:8a:00:4f:31:05:a1:08:b7:68:97:ab:
ee:19:87:77:c5:6e:de:77:6f:c8:c7:49:d4:25:69:03:f8:be:
4e:84:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:50 2024 by rpki-client on console-ams.rpki-client.org